Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all):
- dependency-check version: 13.0.0
- Report Generated On: Sun, 13 Sep 2026 00:29:00 GMT
- Dependencies Scanned: 15 (15 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 0
- ...
- NVD API Last Checked: 2026-09-13T00:18:53Z
- NVD API Last Modified: 2026-09-13T00:17:07Z
Summary
Summary of Vulnerable Dependencies (click to show all)
caffeine-3.2.4.jar
Description:
A high performance caching library
License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/github/ben-manes/caffeine/caffeine/3.2.4/caffeine-3.2.4.jar
MD5: 04d655feb58be297a86fa2814a1f1ef8
SHA1: c63b303adf59c733d2a96125ad6670e938a2c15d
SHA256:9d9d2cfd681fd9272ded3d27c9930db12f89f732345975aa113ebc223bbf1224
Referenced In Project/Scope: waffle-jna-jakarta:compile
caffeine-3.2.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | caffeine | High |
| Vendor | jar | package name | cache | Highest |
| Vendor | jar | package name | caffeine | Highest |
| Vendor | jar | package name | github | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-symbolicname | com.github.ben-manes.caffeine | Medium |
| Vendor | pom | artifactid | caffeine | Highest |
| Vendor | pom | artifactid | caffeine | Low |
| Vendor | pom | developer email | ben.manes@gmail.com | Low |
| Vendor | pom | developer id | ben-manes | Medium |
| Vendor | pom | developer name | Ben Manes | Medium |
| Vendor | pom | groupid | com.github.ben-manes.caffeine | Highest |
| Vendor | pom | name | Caffeine cache | High |
| Vendor | pom | url | ben-manes/caffeine | Highest |
| Product | file | name | caffeine | High |
| Product | jar | package name | cache | Highest |
| Product | jar | package name | caffeine | Highest |
| Product | jar | package name | github | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | Bundle-Name | com.github.ben-manes.caffeine | Medium |
| Product | Manifest | bundle-symbolicname | com.github.ben-manes.caffeine | Medium |
| Product | Manifest | Implementation-Title | A high performance caching library | High |
| Product | pom | artifactid | caffeine | Highest |
| Product | pom | developer email | ben.manes@gmail.com | Low |
| Product | pom | developer id | ben-manes | Low |
| Product | pom | developer name | Ben Manes | Low |
| Product | pom | groupid | com.github.ben-manes.caffeine | Highest |
| Product | pom | name | Caffeine cache | High |
| Product | pom | url | ben-manes/caffeine | High |
| Version | file | version | 3.2.4 | High |
| Version | Manifest | Bundle-Version | 3.2.4 | High |
| Version | Manifest | Implementation-Version | 3.2.4 | High |
| Version | pom | version | 3.2.4 | Highest |
- pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4
(Confidence:High)
checker-qual-4.2.3.jar
Description:
checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.
License:
The MIT License: https://opensource.org/licenses/MIT
File Path: /home/runner/.m2/repository/org/checkerframework/checker-qual/4.2.3/checker-qual-4.2.3.jar
MD5: d9e63a451931be32bd29cfc3ac5674c1
SHA1: d2a10af5c8574adfe24f5e35ff56cca92af2e916
SHA256:f868f731f6e37db3e1c2140d06016477989959a2d13fc5bed9c46760cffd5ba0
Referenced In Project/Scope: waffle-jna-jakarta:compile
checker-qual-4.2.3.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | checker-qual | High |
| Vendor | jar | package name | checker | Highest |
| Vendor | jar | package name | checkerframework | Highest |
| Vendor | jar | package name | framework | Highest |
| Vendor | jar | package name | qual | Highest |
| Vendor | Manifest | bundle-symbolicname | checker-qual | Medium |
| Vendor | Manifest | implementation-url | https://checkerframework.org | Low |
| Vendor | pom | artifactid | checker-qual | Highest |
| Vendor | pom | artifactid | checker-qual | Low |
| Vendor | pom | developer email | mernst@cs.washington.edu | Low |
| Vendor | pom | developer email | smillst@cs.washington.edu | Low |
| Vendor | pom | developer id | mernst | Medium |
| Vendor | pom | developer id | smillst | Medium |
| Vendor | pom | developer name | Michael Ernst | Medium |
| Vendor | pom | developer name | Suzanne Millstein | Medium |
| Vendor | pom | developer org | University of Washington | Medium |
| Vendor | pom | developer org URL | https://www.cs.washington.edu/ | Medium |
| Vendor | pom | groupid | org.checkerframework | Highest |
| Vendor | pom | name | Checker Qual | High |
| Vendor | pom | url | https://checkerframework.org/ | Highest |
| Product | file | name | checker-qual | High |
| Product | jar | package name | checker | Highest |
| Product | jar | package name | checkerframework | Highest |
| Product | jar | package name | framework | Highest |
| Product | jar | package name | qual | Highest |
| Product | Manifest | Bundle-Name | checker-qual | Medium |
| Product | Manifest | bundle-symbolicname | checker-qual | Medium |
| Product | Manifest | implementation-url | https://checkerframework.org | Low |
| Product | pom | artifactid | checker-qual | Highest |
| Product | pom | developer email | mernst@cs.washington.edu | Low |
| Product | pom | developer email | smillst@cs.washington.edu | Low |
| Product | pom | developer id | mernst | Low |
| Product | pom | developer id | smillst | Low |
| Product | pom | developer name | Michael Ernst | Low |
| Product | pom | developer name | Suzanne Millstein | Low |
| Product | pom | developer org | University of Washington | Low |
| Product | pom | developer org URL | https://www.cs.washington.edu/ | Low |
| Product | pom | groupid | org.checkerframework | Highest |
| Product | pom | name | Checker Qual | High |
| Product | pom | url | https://checkerframework.org/ | Medium |
| Version | file | version | 4.2.3 | High |
| Version | Manifest | Bundle-Version | 4.2.3 | High |
| Version | Manifest | Implementation-Version | 4.2.3 | High |
| Version | pom | version | 4.2.3 | Highest |
- pkg:maven/org.checkerframework/checker-qual@4.2.3
(Confidence:High)
error_prone_annotations-2.50.0.jar
Description:
Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.
License:
Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/errorprone/error_prone_annotations/2.50.0/error_prone_annotations-2.50.0.jar
MD5: 1ded1848cfd4f5167e00824faf9c4d3b
SHA1: 74ba43e49ab1184d41634af2ef0047e82c4064b0
SHA256:4667724877f1d37a689202da191e23efa7657c62eef93ccdac406eccfe5cdd0a
Referenced In Project/Scope: waffle-jna-jakarta:provided
error_prone_annotations-2.50.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | error_prone_annotations | High |
| Vendor | jar | package name | annotations | Highest |
| Vendor | jar | package name | errorprone | Highest |
| Vendor | jar | package name | google | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | https://errorprone.info/error_prone_annotations | Low |
| Vendor | Manifest | bundle-symbolicname | com.google.errorprone.annotations | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | error_prone_annotations | Highest |
| Vendor | pom | artifactid | error_prone_annotations | Low |
| Vendor | pom | groupid | com.google.errorprone | Highest |
| Vendor | pom | name | error-prone annotations | High |
| Vendor | pom | parent-artifactid | error_prone_parent | Low |
| Product | file | name | error_prone_annotations | High |
| Product | jar | package name | annotations | Highest |
| Product | jar | package name | errorprone | Highest |
| Product | jar | package name | google | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | https://errorprone.info/error_prone_annotations | Low |
| Product | Manifest | Bundle-Name | error-prone annotations | Medium |
| Product | Manifest | bundle-symbolicname | com.google.errorprone.annotations | Medium |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | error_prone_annotations | Highest |
| Product | pom | groupid | com.google.errorprone | Highest |
| Product | pom | name | error-prone annotations | High |
| Product | pom | parent-artifactid | error_prone_parent | Medium |
| Version | file | version | 2.50.0 | High |
| Version | Manifest | Bundle-Version | 2.50.0 | High |
| Version | pom | version | 2.50.0 | Highest |
- pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0
(Confidence:High)
j2objc-annotations-3.1.jar
Description:
A set of annotations that provide additional information to the J2ObjC
translator to modify the result of translation.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/j2objc/j2objc-annotations/3.1/j2objc-annotations-3.1.jar
MD5: abe8bd3abff622b9a8b15c3a737aa741
SHA1: a892ca9507839bbdb900d64310ac98256cab992f
SHA256:84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b
Referenced In Project/Scope: waffle-jna-jakarta:provided
j2objc-annotations-3.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | j2objc-annotations | High |
| Vendor | jar | package name | annotations | Highest |
| Vendor | jar | package name | google | Highest |
| Vendor | jar | package name | j2objc | Highest |
| Vendor | Manifest | build-jdk-spec | 22 | Low |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | j2objc-annotations | Highest |
| Vendor | pom | artifactid | j2objc-annotations | Low |
| Vendor | pom | developer email | tball@google.com | Low |
| Vendor | pom | developer id | tomball | Medium |
| Vendor | pom | developer name | Tom Ball | Medium |
| Vendor | pom | developer org | Google | Medium |
| Vendor | pom | developer org URL | https://www.google.com | Medium |
| Vendor | pom | groupid | com.google.j2objc | Highest |
| Vendor | pom | name | J2ObjC Annotations | High |
| Vendor | pom | url | google/j2objc/ | Highest |
| Product | file | name | j2objc-annotations | High |
| Product | jar | package name | annotations | Highest |
| Product | jar | package name | google | Highest |
| Product | jar | package name | j2objc | Highest |
| Product | Manifest | build-jdk-spec | 22 | Low |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | j2objc-annotations | Highest |
| Product | pom | developer email | tball@google.com | Low |
| Product | pom | developer id | tomball | Low |
| Product | pom | developer name | Tom Ball | Low |
| Product | pom | developer org | Google | Low |
| Product | pom | developer org URL | https://www.google.com | Low |
| Product | pom | groupid | com.google.j2objc | Highest |
| Product | pom | name | J2ObjC Annotations | High |
| Product | pom | url | google/j2objc/ | High |
| Version | file | version | 3.1 | High |
| Version | pom | version | 3.1 | Highest |
- pkg:maven/com.google.j2objc/j2objc-annotations@3.1
(Confidence:High)
jakarta.servlet-api-6.1.0.jar
Description:
Jakarta Servlet 6.1
License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html
File Path: /home/runner/.m2/repository/jakarta/servlet/jakarta.servlet-api/6.1.0/jakarta.servlet-api-6.1.0.jar
MD5: 314c930b3e40ac1abc3529c7c9942f09
SHA1: 1169a246913fe3823782af7943e7a103634867c5
SHA256:8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4
Referenced In Project/Scope: waffle-jna-jakarta:provided
jakarta.servlet-api-6.1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jakarta.servlet-api | High |
| Vendor | jar | package name | jakarta | Highest |
| Vendor | jar | package name | servlet | Highest |
| Vendor | Manifest | build-jdk-spec | 11 | Low |
| Vendor | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Vendor | Manifest | bundle-symbolicname | jakarta.servlet-api | Medium |
| Vendor | Manifest | extension-name | jakarta.servlet | Medium |
| Vendor | Manifest | Implementation-Vendor | Eclipse Foundation | High |
| Vendor | Manifest | Implementation-Vendor-Id | org.eclipse | Medium |
| Vendor | Manifest | specification-vendor | Eclipse Foundation | Low |
| Vendor | pom | artifactid | jakarta.servlet-api | Highest |
| Vendor | pom | artifactid | jakarta.servlet-api | Low |
| Vendor | pom | developer id | yaminikb | Medium |
| Vendor | pom | developer name | Yamini K B | Medium |
| Vendor | pom | developer org | Oracle Corporation | Medium |
| Vendor | pom | developer org URL | http://www.oracle.com/ | Medium |
| Vendor | pom | groupid | jakarta.servlet | Highest |
| Vendor | pom | name | Jakarta Servlet | High |
| Vendor | pom | parent-artifactid | project | Low |
| Vendor | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Vendor | pom | url | https://projects.eclipse.org/projects/ee4j.servlet | Highest |
| Product | file | name | jakarta.servlet-api | High |
| Product | jar | package name | jakarta | Highest |
| Product | jar | package name | servlet | Highest |
| Product | Manifest | build-jdk-spec | 11 | Low |
| Product | Manifest | bundle-docurl | https://www.eclipse.org | Low |
| Product | Manifest | Bundle-Name | Jakarta Servlet | Medium |
| Product | Manifest | bundle-symbolicname | jakarta.servlet-api | Medium |
| Product | Manifest | extension-name | jakarta.servlet | Medium |
| Product | pom | artifactid | jakarta.servlet-api | Highest |
| Product | pom | developer id | yaminikb | Low |
| Product | pom | developer name | Yamini K B | Low |
| Product | pom | developer org | Oracle Corporation | Low |
| Product | pom | developer org URL | http://www.oracle.com/ | Low |
| Product | pom | groupid | jakarta.servlet | Highest |
| Product | pom | name | Jakarta Servlet | High |
| Product | pom | parent-artifactid | project | Medium |
| Product | pom | parent-groupid | org.eclipse.ee4j | Medium |
| Product | pom | url | https://projects.eclipse.org/projects/ee4j.servlet | Medium |
| Version | file | version | 6.1.0 | High |
| Version | Manifest | Bundle-Version | 6.1.0 | High |
| Version | Manifest | Implementation-Version | 6.1.0 | High |
| Version | pom | parent-version | 6.1.0 | Low |
| Version | pom | version | 6.1.0 | Highest |
- pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0
(Confidence:High)
jna-5.19.1.jar
Description:
Java Native Access
License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.19.1/jna-5.19.1.jar
MD5: cf327da3e9cf5a5d77c8a43540320929
SHA1: ca303052cd617c1af2e2c8d344c98a706fb63143
SHA256:4fb141dd8ef6b0585ffceea4bc49602fbc6312fa977e2c488794ea3e6aafecae
Referenced In Project/Scope: waffle-jna-jakarta:compile
jna-5.19.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jna | High |
| Vendor | jar | package name | jna | Highest |
| Vendor | jar | package name | native | Highest |
| Vendor | jar | package name | sun | Highest |
| Vendor | jar (hint) | package name | oracle | Highest |
| Vendor | Manifest | automatic-module-name | com.sun.jna | Medium |
| Vendor | Manifest | bundle-activationpolicy | lazy | Low |
| Vendor | Manifest | bundle-category | jni | Low |
| Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=sparcv9;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=aarch64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low |
| Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low |
| Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium |
| Vendor | Manifest | Implementation-Vendor | JNA Development Team | High |
| Vendor | Manifest | specification-vendor | JNA Development Team | Low |
| Vendor | pom | artifactid | jna | Highest |
| Vendor | pom | artifactid | jna | Low |
| Vendor | pom | developer email | mblaesing@doppel-helix.eu | Low |
| Vendor | pom | developer id | twall | Medium |
| Vendor | pom | developer name | Matthias Bläsing | Medium |
| Vendor | pom | developer name | Timothy Wall | Medium |
| Vendor | pom | groupid | net.java.dev.jna | Highest |
| Vendor | pom | name | Java Native Access | High |
| Vendor | pom | url | java-native-access/jna | Highest |
| Product | file | name | jna | High |
| Product | jar | package name | jna | Highest |
| Product | jar | package name | library | Highest |
| Product | jar | package name | native | Highest |
| Product | jar | package name | sun | Highest |
| Product | jar | package name | win32 | Highest |
| Product | Manifest | automatic-module-name | com.sun.jna | Medium |
| Product | Manifest | bundle-activationpolicy | lazy | Low |
| Product | Manifest | bundle-category | jni | Low |
| Product | Manifest | Bundle-Name | jna | Medium |
| Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/linux-riscv64/libjnidispatch.so; processor=riscv64;osname=linux, com/sun/jna/dragonflybsd-x86-64/libjnidispatch.so; processor=x86-64;osname=dragonflybsd, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/freebsd-aarch64/libjnidispatch.so; processor=aarch64;osname=freebsd, com/sun/jna/freebsd-ppc64le/libjnidispatch.so; processor=ppc64le;osname=freebsd, com/sun/jna/freebsd-ppc64/libjnidispatch.so; processor=ppc64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=sparcv9;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=aarch64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low |
| Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low |
| Product | Manifest | bundle-symbolicname | com.sun.jna | Medium |
| Product | Manifest | Implementation-Title | com.sun.jna | High |
| Product | Manifest | specification-title | Java Native Access (JNA) | Medium |
| Product | pom | artifactid | jna | Highest |
| Product | pom | developer email | mblaesing@doppel-helix.eu | Low |
| Product | pom | developer id | twall | Low |
| Product | pom | developer name | Matthias Bläsing | Low |
| Product | pom | developer name | Timothy Wall | Low |
| Product | pom | groupid | net.java.dev.jna | Highest |
| Product | pom | name | Java Native Access | High |
| Product | pom | url | java-native-access/jna | High |
| Version | file | version | 5.19.1 | High |
| Version | Manifest | Bundle-Version | 5.19.1 | High |
| Version | pom | version | 5.19.1 | Highest |
- pkg:maven/net.java.dev.jna/jna@5.19.1
(Confidence:High)
jna-5.19.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.19.1/jna-5.19.1.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: 302945a811fd8e21bcdd5226c73b6f74
SHA1: 6b05e299ff2b3eb3b7b7aeac44263f715693607c
SHA256:b8f98be314234cf12b5b46c29652f70c0f6abb93ae19b63d3fe2692062aa699d
Referenced In Project/Scope: waffle-jna-jakarta:compile
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jnidispatch | High |
| Product | file | name | jnidispatch | High |
jna-5.19.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.19.1/jna-5.19.1.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 2d2475f1f026dd54e9f3e787ae4f81da
SHA1: 27ff882ac271db547aee520b38e3ba9aa91e136c
SHA256:5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
Referenced In Project/Scope: waffle-jna-jakarta:compile
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jnidispatch | High |
| Product | file | name | jnidispatch | High |
jna-5.19.1.jar: jnidispatch.dll
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna/5.19.1/jna-5.19.1.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 0caa1ef75a807f9dde05084fa2219a5c
SHA1: 2f5e1cd82cde192905c7510ce99037b67d980640
SHA256:752d597cee7e95cb517327146bf42f124c0d6c0bc48b3ecc3b1b3b0531a52f44
Referenced In Project/Scope: waffle-jna-jakarta:compile
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jnidispatch | High |
| Product | file | name | jnidispatch | High |
jna-platform-5.19.1.jar
Description:
Java Native Access Platform
License:
LGPL-2.1-or-later: https://www.gnu.org/licenses/old-licenses/lgpl-2.1
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/net/java/dev/jna/jna-platform/5.19.1/jna-platform-5.19.1.jar
MD5: 1d97b6103a9b3b7ddb671908683f4566
SHA1: d1e54d9231da5ca3fa730d52960deaa555475468
SHA256:3b3864f5b449e9c3c24b16861524b622b086563f44e0cd8384c8efc5a6052f82
Referenced In Project/Scope: waffle-jna-jakarta:compile
jna-platform-5.19.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jna-platform | High |
| Vendor | jar | package name | jna | Highest |
| Vendor | jar | package name | platform | Highest |
| Vendor | jar | package name | sun | Highest |
| Vendor | jar (hint) | package name | oracle | Highest |
| Vendor | Manifest | automatic-module-name | com.sun.jna.platform | Medium |
| Vendor | Manifest | bundle-category | jni | Low |
| Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.4 | Low |
| Vendor | Manifest | bundle-symbolicname | com.sun.jna.platform | Medium |
| Vendor | Manifest | Implementation-Vendor | JNA Development Team | High |
| Vendor | Manifest | specification-vendor | JNA Development Team | Low |
| Vendor | pom | artifactid | jna-platform | Highest |
| Vendor | pom | artifactid | jna-platform | Low |
| Vendor | pom | developer email | mblaesing@doppel-helix.eu | Low |
| Vendor | pom | developer id | twall | Medium |
| Vendor | pom | developer name | Matthias Bläsing | Medium |
| Vendor | pom | developer name | Timothy Wall | Medium |
| Vendor | pom | groupid | net.java.dev.jna | Highest |
| Vendor | pom | name | Java Native Access Platform | High |
| Vendor | pom | url | java-native-access/jna | Highest |
| Product | file | name | jna-platform | High |
| Product | jar | package name | jna | Highest |
| Product | jar | package name | platform | Highest |
| Product | jar | package name | sun | Highest |
| Product | Manifest | automatic-module-name | com.sun.jna.platform | Medium |
| Product | Manifest | bundle-category | jni | Low |
| Product | Manifest | Bundle-Name | jna-platform | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.4 | Low |
| Product | Manifest | bundle-symbolicname | com.sun.jna.platform | Medium |
| Product | Manifest | Implementation-Title | com.sun.jna | High |
| Product | Manifest | specification-title | Java Native Access (JNA) | Medium |
| Product | pom | artifactid | jna-platform | Highest |
| Product | pom | developer email | mblaesing@doppel-helix.eu | Low |
| Product | pom | developer id | twall | Low |
| Product | pom | developer name | Matthias Bläsing | Low |
| Product | pom | developer name | Timothy Wall | Low |
| Product | pom | groupid | net.java.dev.jna | Highest |
| Product | pom | name | Java Native Access Platform | High |
| Product | pom | url | java-native-access/jna | High |
| Version | file | version | 5.19.1 | High |
| Version | Manifest | Bundle-Version | 5.19.1 | High |
| Version | pom | version | 5.19.1 | Highest |
- pkg:maven/net.java.dev.jna/jna-platform@5.19.1
(Confidence:High)
jspecify-1.0.0.jar
Description:
An artifact of well-named and well-specified annotations to power static analysis checks
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar
MD5: 9133aba420d0ca3b001dbb6ae9992cf6
SHA1: 7425a601c1c7ec76645a78d22b8c6a627edee507
SHA256:1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab
Referenced In Project/Scope: waffle-jna-jakarta:compile
jspecify-1.0.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.4
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jspecify | High |
| Vendor | jar | package name | annotations | Highest |
| Vendor | jar | package name | jspecify | Highest |
| Vendor | Manifest | bundle-docurl | https://jspecify.dev/docs/start-here | Low |
| Vendor | Manifest | bundle-symbolicname | org.jspecify.jspecify | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | jspecify | Highest |
| Vendor | pom | artifactid | jspecify | Low |
| Vendor | pom | developer email | kevinb9n@gmail.com | Low |
| Vendor | pom | developer id | kevinb9n | Medium |
| Vendor | pom | developer name | Kevin Bourrillion | Medium |
| Vendor | pom | groupid | org.jspecify | Highest |
| Vendor | pom | name | JSpecify annotations | High |
| Vendor | pom | url | http://jspecify.org/ | Highest |
| Product | file | name | jspecify | High |
| Product | jar | package name | annotations | Highest |
| Product | jar | package name | jspecify | Highest |
| Product | Manifest | bundle-docurl | https://jspecify.dev/docs/start-here | Low |
| Product | Manifest | Bundle-Name | JSpecify annotations | Medium |
| Product | Manifest | bundle-symbolicname | org.jspecify.jspecify | Medium |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | jspecify | Highest |
| Product | pom | developer email | kevinb9n@gmail.com | Low |
| Product | pom | developer id | kevinb9n | Low |
| Product | pom | developer name | Kevin Bourrillion | Low |
| Product | pom | groupid | org.jspecify | Highest |
| Product | pom | name | JSpecify annotations | High |
| Product | pom | url | http://jspecify.org/ | Medium |
| Version | file | version | 1.0.0 | High |
| Version | Manifest | Bundle-Version | 1.0.0 | High |
| Version | Manifest | Implementation-Version | 1.0.0 | High |
| Version | pom | version | 1.0.0 | Highest |
- pkg:maven/org.jspecify/jspecify@1.0.0
(Confidence:High)
jsr305-3.0.2.jar
Description:
JSR305 Annotations for Findbugs
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt
File Path: /home/runner/.m2/repository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: waffle-jna-jakarta:provided
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | jsr305 | High |
| Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium |
| Vendor | pom | artifactid | jsr305 | Highest |
| Vendor | pom | artifactid | jsr305 | Low |
| Vendor | pom | groupid | com.google.code.findbugs | Highest |
| Vendor | pom | name | FindBugs-jsr305 | High |
| Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest |
| Product | file | name | jsr305 | High |
| Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium |
| Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium |
| Product | pom | artifactid | jsr305 | Highest |
| Product | pom | groupid | com.google.code.findbugs | Highest |
| Product | pom | name | FindBugs-jsr305 | High |
| Product | pom | url | http://findbugs.sourceforge.net/ | Medium |
| Version | file | version | 3.0.2 | High |
| Version | Manifest | Bundle-Version | 3.0.2 | High |
| Version | pom | version | 3.0.2 | Highest |
- pkg:maven/com.google.code.findbugs/jsr305@3.0.2
(Confidence:High)
slf4j-api-2.0.19.jar
Description:
The slf4j API
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-api/2.0.19/slf4j-api-2.0.19.jar
MD5: 1ca3a2acac3d5947b37d9b5536c55829
SHA1: efad9817997b3a6ce9e058f92e612917a744c290
SHA256:e91ff6d720609e7a194ffe758c3ed5c84e798617ae07b0a0f6a4fe229741b4bb
Referenced In Project/Scope: waffle-jna-jakarta:compile
slf4j-api-2.0.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | slf4j-api | High |
| Vendor | jar | package name | slf4j | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | pom | artifactid | slf4j-api | Highest |
| Vendor | pom | artifactid | slf4j-api | Low |
| Vendor | pom | groupid | org.slf4j | Highest |
| Vendor | pom | name | SLF4J API Module | High |
| Vendor | pom | parent-artifactid | slf4j-parent | Low |
| Vendor | pom | url | http://www.slf4j.org | Highest |
| Product | file | name | slf4j-api | High |
| Product | jar | package name | slf4j | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Product | Manifest | Bundle-Name | SLF4J API Module | Medium |
| Product | Manifest | bundle-symbolicname | slf4j.api | Medium |
| Product | Manifest | Implementation-Title | slf4j-api | High |
| Product | Manifest | multi-release | true | Low |
| Product | pom | artifactid | slf4j-api | Highest |
| Product | pom | groupid | org.slf4j | Highest |
| Product | pom | name | SLF4J API Module | High |
| Product | pom | parent-artifactid | slf4j-parent | Medium |
| Product | pom | url | http://www.slf4j.org | Medium |
| Version | file | version | 2.0.19 | High |
| Version | Manifest | Bundle-Version | 2.0.19 | High |
| Version | Manifest | Implementation-Version | 2.0.19 | High |
| Version | pom | version | 2.0.19 | Highest |
- pkg:maven/org.slf4j/slf4j-api@2.0.19
(Confidence:High)
slf4j-simple-2.0.19.jar
Description:
SLF4J Simple Provider
License:
https://opensource.org/license/mit
File Path: /home/runner/.m2/repository/org/slf4j/slf4j-simple/2.0.19/slf4j-simple-2.0.19.jar
MD5: b36bba5fb90a342081e46cc006c039ec
SHA1: 61c4ac1c4f20de57d3820493c91a7af41eccb778
SHA256:1d20cbfc8f97a719112a72c6d4c2323259d179a7478d1f694b54409d412bb731
Referenced In Project/Scope: waffle-jna-jakarta:compile
slf4j-simple-2.0.19.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | slf4j-simple | High |
| Vendor | jar | package name | simple | Highest |
| Vendor | jar | package name | slf4j | Highest |
| Vendor | Manifest | build-jdk-spec | 21 | Low |
| Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Vendor | Manifest | bundle-symbolicname | slf4j.simple | Medium |
| Vendor | Manifest | multi-release | true | Low |
| Vendor | Manifest | originally-created-by | Apache Maven Bundle Plugin 5.1.9 | Low |
| Vendor | Manifest | provide-capability | osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";type=simple;effective:=active,osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="org.slf4j.simple.SimpleServiceProvider";type=simple | Low |
| Vendor | pom | artifactid | slf4j-simple | Highest |
| Vendor | pom | artifactid | slf4j-simple | Low |
| Vendor | pom | groupid | org.slf4j | Highest |
| Vendor | pom | name | SLF4J Simple Provider | High |
| Vendor | pom | parent-artifactid | slf4j-parent | Low |
| Vendor | pom | url | http://www.slf4j.org | Highest |
| Product | file | name | slf4j-simple | High |
| Product | jar | package name | 9 | Highest |
| Product | jar | package name | simple | Highest |
| Product | jar | package name | simpleserviceprovider | Highest |
| Product | jar | package name | slf4j | Highest |
| Product | Manifest | build-jdk-spec | 21 | Low |
| Product | Manifest | bundle-docurl | http://www.slf4j.org | Low |
| Product | Manifest | Bundle-Name | SLF4J Simple Provider | Medium |
| Product | Manifest | bundle-symbolicname | slf4j.simple | Medium |
| Product | Manifest | Implementation-Title | slf4j-simple | High |
| Product | Manifest | multi-release | true | Low |
| Product | Manifest | originally-created-by | Apache Maven Bundle Plugin 5.1.9 | Low |
| Product | Manifest | provide-capability | osgi.service;objectClass:List="org.slf4j.spi.SLF4JServiceProvider";type=simple;effective:=active,osgi.serviceloader;osgi.serviceloader="org.slf4j.spi.SLF4JServiceProvider";register:="org.slf4j.simple.SimpleServiceProvider";type=simple | Low |
| Product | pom | artifactid | slf4j-simple | Highest |
| Product | pom | groupid | org.slf4j | Highest |
| Product | pom | name | SLF4J Simple Provider | High |
| Product | pom | parent-artifactid | slf4j-parent | Medium |
| Product | pom | url | http://www.slf4j.org | Medium |
| Version | file | version | 2.0.19 | High |
| Version | Manifest | Bundle-Version | 2.0.19 | High |
| Version | Manifest | Implementation-Version | 2.0.19 | High |
| Version | pom | version | 2.0.19 | Highest |
- pkg:maven/org.slf4j/slf4j-simple@2.0.19
(Confidence:High)
spotbugs-annotations-4.10.4.jar
Description:
Annotations the SpotBugs tool supports
License:
GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html
File Path: /home/runner/.m2/repository/com/github/spotbugs/spotbugs-annotations/4.10.4/spotbugs-annotations-4.10.4.jar
MD5: 472925cb4e5451c8f7a1aeeefe286622
SHA1: 7eb4c58212378becfb6ea6d236ec24a2352a316e
SHA256:28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
Referenced In Project/Scope: waffle-jna-jakarta:provided
spotbugs-annotations-4.10.4.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/com.github.waffle/waffle-jna-jakarta@3.6.1-SNAPSHOT
Evidence
| Type | Source | Name | Value | Confidence |
|---|
| Vendor | file | name | spotbugs-annotations | High |
| Vendor | Manifest | automatic-module-name | com.github.spotbugs.annotations | Medium |
| Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low |
| Vendor | Manifest | bundle-symbolicname | spotbugs-annotations | Medium |
| Vendor | pom | artifactid | spotbugs-annotations | Highest |
| Vendor | pom | artifactid | spotbugs-annotations | Low |
| Vendor | pom | developer email | andreas.sewe@codetrails.com | Low |
| Vendor | pom | developer email | dbrosius@mebigfatguy.com | Low |
| Vendor | pom | developer email | loskutov@gmx.de | Low |
| Vendor | pom | developer email | skypencil@gmail.com | Low |
| Vendor | pom | developer id | henrik242 | Medium |
| Vendor | pom | developer id | iloveeclipse | Medium |
| Vendor | pom | developer id | jsotuyod | Medium |
| Vendor | pom | developer id | KengoTODA | Medium |
| Vendor | pom | developer id | mebigfatguy | Medium |
| Vendor | pom | developer id | sewe | Medium |
| Vendor | pom | developer id | ThrawnCA | Medium |
| Vendor | pom | developer name | Andreas Sewe | Medium |
| Vendor | pom | developer name | Andrey Loskutov | Medium |
| Vendor | pom | developer name | Dave Brosius | Medium |
| Vendor | pom | developer name | Juan Martín Sotuyo Dodero | Medium |
| Vendor | pom | developer name | Kengo TODA | Medium |
| Vendor | pom | groupid | com.github.spotbugs | Highest |
| Vendor | pom | name | SpotBugs Annotations | High |
| Vendor | pom | url | https://spotbugs.github.io/ | Highest |
| Product | file | name | spotbugs-annotations | High |
| Product | Manifest | automatic-module-name | com.github.spotbugs.annotations | Medium |
| Product | Manifest | Bundle-Name | spotbugs-annotations | Medium |
| Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low |
| Product | Manifest | bundle-symbolicname | spotbugs-annotations | Medium |
| Product | pom | artifactid | spotbugs-annotations | Highest |
| Product | pom | developer email | andreas.sewe@codetrails.com | Low |
| Product | pom | developer email | dbrosius@mebigfatguy.com | Low |
| Product | pom | developer email | loskutov@gmx.de | Low |
| Product | pom | developer email | skypencil@gmail.com | Low |
| Product | pom | developer id | henrik242 | Low |
| Product | pom | developer id | iloveeclipse | Low |
| Product | pom | developer id | jsotuyod | Low |
| Product | pom | developer id | KengoTODA | Low |
| Product | pom | developer id | mebigfatguy | Low |
| Product | pom | developer id | sewe | Low |
| Product | pom | developer id | ThrawnCA | Low |
| Product | pom | developer name | Andreas Sewe | Low |
| Product | pom | developer name | Andrey Loskutov | Low |
| Product | pom | developer name | Dave Brosius | Low |
| Product | pom | developer name | Juan Martín Sotuyo Dodero | Low |
| Product | pom | developer name | Kengo TODA | Low |
| Product | pom | groupid | com.github.spotbugs | Highest |
| Product | pom | name | SpotBugs Annotations | High |
| Product | pom | url | https://spotbugs.github.io/ | Medium |
| Version | file | version | 4.10.4 | High |
| Version | Manifest | Bundle-Version | 4.10.4 | High |
| Version | pom | version | 4.10.4 | Highest |
- pkg:maven/com.github.spotbugs/spotbugs-annotations@4.10.4
(Confidence:High)